* Fix bug #28503.

2023-06-05 09:32:50 +08:00
parent 5fc8e8b1f4
commit 3ceabcf182
1 changed files with 1 additions and 0 deletions
@@ -417,6 +417,7 @@ class baseEntry
     */
    public function setPost($key, $value)
    {
+        if(in_array($key, array('desc', 'spec', 'verify', 'steps'))) $value = htmlspecialchars($value);
        $_POST[$key] = $value;
    }